Which Host Intrusion Protection System (HIPS) are you using?

Hi all,

Well, I will try again.

I'm curious where everyone is at with Host Intrustion Protection Programs (HIPS). Comments, as always, are very much welcomed, including why they work or don't work for you. The list is more or less coming from kareldjag's list at:

http://kareldjag.over-blog.com/

Thanks for participating.

Regards,
Rich

 

My current setup:

ProcessGuard
RegDefend
Online Armor (trying it out)

Rich

 

prevx
processguard
regdefend
regrun
and as to why I use them. They run well on my machine and nothing has gotten through since I have been useing them. Well nothing got through before I used them either but running them couldn't hurt.

 

I never used them and I don't know what they really are.
My intuition however tells me that these softwares require a certain knowledge of computers/internet and can NOT be used by ignorant users, who don't even see the difference between right and wrong.

 

All in my Sig!! And as bigc said, nothing gets Through or ever has!!

 

Antihook, for a free program, does its job well.

 

Hi Arup,

I noticed that your vote didn't register. If you meant to vote, you might want to try again, so that AntiHook gets a fair representation. Thanks for participating.

Regards,
Rich

 

Process Guard
RegDefend

I hope the development of these two continue to prosper and stay ahead of the competition so we may enjoy them for many years to come.

 

The subject of this thread is which HIPS type applications one uses. I've removed one off topic post. Staying on topic and within the TOS would be most appreciated. Thank you.

Blue

 

Hi steverio,

I believe that for ProcessGuard and RegDefend to prosper, they will need a revenue stream that is competitive with other vendors in this market. I started a thread on whether PG should adopt an annual subscription model over in the PG forum. It will be interesting to hear what people have to say.

Cya,
Rich

 

I'm running Online Armor, Prevx home, ProcessGuard full. Does Regrun count? Is this too much overlap? Should I get rid of Prevx home?

 

Hi richrf,

I put my vote for AH again, this time I think it registered.

 

Hi C3nt,

If memory serves me correctly, RegRun is a registry monitor, and does not prevent a registry from being updated, as do products like Prevx Home and RegDefend, but rather alerts a user and then allows a user to "undo" an entry, if the user chooses to.

One of the reasons I chose RegDefend, is that it is possible to add new entries to the RegDefend Group list, so that other areas of the registry can be protected if the user so wishes. In this regard, RegDefend is quite transparent and configurable. Kent, for example, graciously provided a list of RegRun definitions to the RegDefend forum, which other users could copy over and add to their own RegDefend Groups list. Therefore, RegDefend would guard all of the same areas as RegRun.

I am not sure whether Prevx Home has the same kind of transparency/configurablity. I don't recall seeing this kind of facility. Possibly the new version does. You might want to ask this as a seperate question in the "Privacy and other Anti-malware" section of this forum, if no one answers your question here. If you are able to add the RegRun definitions to Prevx, then there probably would be no reason to keep RegRun on your system.

Hope this helps,
Rich

 

AntiHook is the one I use, good program indeed.

 

I figured I have Prevx, Process Guard, and winpatrol watching registry real time so Regrun would be good to have since it seems like it's much more than just a registry poller. Is this not good idea?

http://img209.imageshack.us/img209/6984/regrun1go.jpg

 

Remember to vote, so that AntiHook gets its fair share of representation. So far I see only Arup's vote, so make sure your vote registered.

Cya,
Rich

 

If Prevx is covering the same registry entries as RegRun then it would be redundant, and since pollers tend to use CPU, as they poll, you would be losing system resources. It is up to you whether you need this redundancy (at the cost of system resources). If Prevx and Regrun are covering different registry entries, then there is no redundancy and then it is a question of whether the extra protection that RegRun may be giving you is worth the system resources it is using. If you are satisfied with your system performance, there probably is no harm being done and I don't expect there be any conflicts. Others may have actual experiences that they can share with you.

Rich

 

When I was using Prevx Pro with RegRun, I rather liked the (limited) redundancy. Prevx intercepted the most key points while RegRun would catch the extended stuff, which tended to happen in multiples, so you only got one pop-up instead of many. It would also alert me to any items that Prevx may have missed in install mode, or that I accidently allowed.

 

it is ok.

 

I only want a better version of ProcessGuard...

 

Online Armor and Process Guard.

 

Don't know whether to be surprised or not surprised that there are no votes for SSM. It is one of the oldest HIPS available ... but possibly its time has past.

 

i use processguard, safe 'n' sec, and online armor. i also use regrun if that counts. prevx seems interesting but too many alerts and i dont feel like paying for the pro or prevx1. home would do, but i just want more options.

 

Me too VC!!! me too!


Thanx!

 

I just have standard home Px and whatever updates regrun sends (I don't know how or what to add to regrun). I have disabled Px as it's conflicting with OA (as I stated in OA thread) However, I do enjoy being able to reverse changes in registry easily with regrun - occasionally. Thanks richrf